General
- Target 2026-06-28_135f4fec9263332ce8d8e462c8b4d6b2_agent-tesla_amadey_cobalt-strike_coinminer_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_rugmi_satacom_smoke-loader_stealc
- Size 7.5MB
- Sample260629-amy46sat2k
- SHA256 719eb73da189f2a2790f6ff1a01fc538938230cba641c276cc721d8613cd4223
- MD5 135f4fec9263332ce8d8e462c8b4d6b2
- SHA1 ab43cb89696deb97d1ba07b518a0acad067675bb
- SHA512 d3640c3b9573785c337e44422cdc325b83052092a83264193b6f8f4173e0ca4bc2f4b271c41ce9cc98f7954782c6422961a377f01ff7bb0f0d50daabce32ac1d
- SSDEEP 98304:AKRuy5a/OU/jIEeQfoR/IuOFVjUu55K2cPK8xi+4jR4TU0oLZ1opDbSVHrjK:AquFIF0wuPlCKrjRZLZ7pjK
- TLSH T17286AE1276D44035F5B316319A3592656A39BCA58F32CA9F338C2D5E7FB16C08A3A733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-06-28_135f4fec9263332ce8d8e462c8b4d6b2_agent-tesla_amadey_cobalt-strike_coinminer_darkgate_glas.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-28_135f4fec9263332ce8d8e462c8b4d6b2_agent-tesla_amadey_cobalt-strike_coinminer_darkgate_glas.exe
Resource
win11ltsc2024-20260618-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-28_135f4fec9263332ce8d8e462c8b4d6b2_agent-tesla_amadey_cobalt-strike_coinminer_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_rugmi_satacom_smoke-loader_stealc
- Size 7.5MB
- SHA256 719eb73da189f2a2790f6ff1a01fc538938230cba641c276cc721d8613cd4223
- MD5 135f4fec9263332ce8d8e462c8b4d6b2
- SHA1 ab43cb89696deb97d1ba07b518a0acad067675bb
- SHA512 d3640c3b9573785c337e44422cdc325b83052092a83264193b6f8f4173e0ca4bc2f4b271c41ce9cc98f7954782c6422961a377f01ff7bb0f0d50daabce32ac1d
- SSDEEP 98304:AKRuy5a/OU/jIEeQfoR/IuOFVjUu55K2cPK8xi+4jR4TU0oLZ1opDbSVHrjK:AquFIF0wuPlCKrjRZLZ7pjK
- TLSH T17286AE1276D44035F5B316319A3592656A39BCA58F32CA9F338C2D5E7FB16C08A3A733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables manipulated with Fody
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
AutoIT Executable
AutoIT scripts compiled to PE executables.